eigrp part 1 sep 2010
TRANSCRIPT
-
8/22/2019 Eigrp Part 1 Sep 2010
1/97
BAI 511
Advanced Routing ProtocolsEIGRP Part 1
-
8/22/2019 Eigrp Part 1 Sep 2010
2/97
2
EIGRP Part 1
Review
Wildcard masks
Authentication
Passive Interfaces
Stuck-in-active
Stub Routers
Variance
Ip-bandwidth percent
-
8/22/2019 Eigrp Part 1 Sep 2010
3/97
Review
-
8/22/2019 Eigrp Part 1 Sep 2010
4/97
4
What do we remember about EIGRP?
What type of protocol is EIGRP?
Distance Vector
What are the default metrics used by EIGRP?
Bandwidth (slowest) and Delay (cumulative) What are the optional metrics?
Reliability and Load
What algorithm is used to determine best path?
DUAL (Diffusing Update Algorithm)
-
8/22/2019 Eigrp Part 1 Sep 2010
5/97
5
Review of EIGRP from CCNA
Enhanced Interior Gateway Routing Protocol (EIGRP)
Released in 1992 with Cisco IOS Software Release 9.21.
Enhancement of Ciscos:
Interior Gateway Routing Protocol (IGRP).
Both are Cisco proprietary, operate only on:
Cisco routers
-
8/22/2019 Eigrp Part 1 Sep 2010
6/97
6
RTP and EIGRP
Packet Types
What transport layer protocol does EIGRP use?
Reliable Transport Protocol (RTP)
Why doesnt EIGRP use UDP or TCP?
-
8/22/2019 Eigrp Part 1 Sep 2010
7/97
7
Protocol-
Dependent
Modules
EIGRP uses protocol-dependent modules (PDM). to route
different protocols, including:
IP
Internetwork Packet Exchange (IPX)
AppleTalk,
-
8/22/2019 Eigrp Part 1 Sep 2010
8/97
8
EIGRP Packet
TypesHello
Packet
What are Hello packets used for by EIGRP to:
Discover neighbors (sometimes called neighborsh ips )
Form adjacencies with those neighbors What is the multicast address? Hint: 224.0.0.?
224.0.0.10
Are these sent as reliable or unreliable deliver?
Unreliable delivery No ACKs returned
-
8/22/2019 Eigrp Part 1 Sep 2010
9/97
9
Hello Protocol
-
8/22/2019 Eigrp Part 1 Sep 2010
10/97
10
Hello Protocol
Default hold time - 3 times the hello interval
If the hold timeexpires:
EIGRP declares the route as down
DUAL searches for a new path in the topology table or by
sending out queries.
-
8/22/2019 Eigrp Part 1 Sep 2010
11/97
11
Update Packets Reliable Delivery
Acknowledgment (ACK) Packets
Sent when reliable delivery is used (update, query, and reply
packets).
EIGRP uses
triggered
updates
EIGRP Packet Types
Update and
AcknowledgementPackets
-
8/22/2019 Eigrp Part 1 Sep 2010
12/97
12
EIGRP Packet
TypesQuery
and ReplyPackets
Queries and replies use reliable delivery.
Used by DUAL when searching for networks and other tasks.
-
8/22/2019 Eigrp Part 1 Sep 2010
13/97
13
DUAL: An Introduction
J. J. Garcia-Luna-Aceves
-
8/22/2019 Eigrp Part 1 Sep 2010
14/97
14
DUAL: An Introduction
.
XOr holdtime expires
R2: Checks
Topology table forFeasible
Successor. If no
FS
-
8/22/2019 Eigrp Part 1 Sep 2010
15/97
15
Summary - RTP Packet Types
Hellos Identifies neighbors
Used by the neighbor discovery and recovery process.
Multicast
Unreliable delivery
Acknowledgements (ACK) Acknowledges receipt
Hello packets with no data
Unicast
Unreliable delivery Updates Advertises routes
Transmitted only when necessary
Unicast when sent to a specific router
Multicast when sent to multiple routers
Reliable delivery
Queries Ask about a route (DUAL) Reliable delivery
Multicast or Unicast
Queries and Replies Ask about a route and answer a query (DUAL)
Reliable delivery
Replies: Unicast
-
8/22/2019 Eigrp Part 1 Sep 2010
16/97
16
Administrative Distance
When compared to other
interior gateway protocols(IGP), EIGRP is the most
preferred by the Cisco IOS
software because it has the
lowest AD.
Laterin this chapter, you
learn how to configure EIGRP
summary routes.
-
8/22/2019 Eigrp Part 1 Sep 2010
17/97
17
Configuring Hello Intervals and Hold Times
Configurable on a per-interface basis, NOT per neighbor (LANs)
Does not have to match with other EIGRP routers to establish
adjacencies.
Router(config-if)# ip hello-intervaleigrpas-number seconds
Router(config-if)# ip hold-time eigrp as-number seconds
-
8/22/2019 Eigrp Part 1 Sep 2010
18/97
18
The show ip eigrp interfaces detail command displays a router's
EIGRP Hello timer setting for each enabled interface.
R3# show ip eigrp neighbors detail
IP-EIGRP neighbors for process 1
H Address Interface Hold Uptime SRTT RTO Q Seq Type
(sec) (ms) Cnt Num
3 10.0.0.18 Se0/3 13 01:03:55 24 200 0 5
Version 12.3/1.2, Retrans: 2, Retries: 0
2 10.0.0.14 Se0/2 14 01:04:08 29 200 0 4Version 12.3/1.2, Retrans: 1, Retries: 0
1 10.0.0.5 Se0/0 13 01:09:52 607 3642 0 13
Version 12.3/1.2, Retrans: 0, Retries: 0
0 10.0.0.9 Se0/1 12 01:10:19 60 360 0 21
Version 12.3/1.2, Retrans: 0, Retries: 0
R3#
-
8/22/2019 Eigrp Part 1 Sep 2010
19/97
19
Router-ID
EIGRP Router ID is an IP address used to uniquely identify an
EIGRP router.
1. Use the IP address configured with the EIGRP router-id
command.
2. Highest IP address of any of itsloopback interfaces.
3. Highest act iveIP address of any of its physical interfaces.
Router(config)# routereigrpas
Router(config-router)# router-idip-address
-
8/22/2019 Eigrp Part 1 Sep 2010
20/97
20
Forming Neighbor Adjacencies
Per interface/subinterface not per neighbor
The following are the most common causes of problems with EIGRPneighbor relationships:
Unidirectional link
Uncommon subnet, primary, and secondary address mismatch
Mismatched masks
K value mismatches
Mismatched AS numbers
Stuck in active
Layer 2 problem
Access list denying multicast packets Manual change (summary router, metric change, route filter)
Does NOT prevent neighbor relationships
Hello and Hold timer setting mismatch
Duplicate router IDs
IP MTU mismatch
-
8/22/2019 Eigrp Part 1 Sep 2010
21/97
The Metric
-
8/22/2019 Eigrp Part 1 Sep 2010
22/97
22
Metric
By default, K1 and K3 are set to 1, and K2, K4, and K5 are set to 0.
The result is that only the bandwidth and delay values are used inthe computation of the default composite metric.
-
8/22/2019 Eigrp Part 1 Sep 2010
23/97
23
Metric
The K values on R1 are set to the default.
Changing these values to other than the default is not recommended
unless the network administrator has a very good reason to do so.
Cisco recommends that these values are not modified.
R1# show ip protocols
Routing Protocol is eigrp 1
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updates
Default networks accepted from incoming updates
EIGRP metric weight K1=1, K2=0, K3=1, K4=0, K5=0
K1 K2 K3 K4 K5
-
8/22/2019 Eigrp Part 1 Sep 2010
24/97
Metric: Displaying Interface Values
Westasman> show interface fa0/0
Ethernet0 is up, line protocol is up
Hardware is Lance, address is 0010.7b3a.cf84 (bia 0010.7b3a.cf84)
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
rely 255/255, load 1/255
SanJose2> show interface s0/0
Serial0/0 is up, line protocol is up
Hardware is QUICC Serial
Description: Out to Westasman
Internet address is 192.168.64.5/30
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,
rely 255/255, load 246/255
-
8/22/2019 Eigrp Part 1 Sep 2010
25/97
25
DUAL Concepts
Diffusing Update Algorithm is the algorithm used by
EIGRP.
Determines:
best loop-free path
loop-free backup paths (which can be used immediately)
DUAL also provides the following:
Fast convergence
Minimum bandwidth usage with bounded updates
DUAL uses several terms that are discussed in more detail
throughout this section:
Successor Feasible distance
Feasible successor
Reported distance or advertised distance
Feasible condition or feasibility condition
-
8/22/2019 Eigrp Part 1 Sep 2010
26/97
26
Feasible distance (FD) is the minimum distance (metric) along a path to a
destination network.Reported distance (RD) is the distance (metric) towards a destination as advertised
by an upstream neighbor. Reported distance is the distance reported in the
queries, the replies and the updates.
A neighbor meets the feasible condition (FC) if the reported distance by the
neighbor is less than the current feasible distance (FD) of this router. "If a
neighbors metric is less than mine, then I know the neighbor doesn't have a loop
going through me."
A feasible successoris a neighbor whose reported distance (RD) is less than the
current feasible distance (FD). Feasible successor is one who meets the feasible
condition (FC).
Your route (metric) to the network (RD to me) must be LESS than my current route
(my total metric) to that same network. If your route (metric) to the network (RD to
me) is LESS than my current route (my total metric), I will include you as a
FEASIBLE SUCCESSOR.
If your route (metric) to the network (RD to me) is MORE than my current route (my
total metric), I will NOT include you as a FEASIBLE SUCCESSOR.
Successors and Feasible Successors
-
8/22/2019 Eigrp Part 1 Sep 2010
27/97
27
Example 1: Best Path (Successor)? Feasible Successor?
R1
R2
R3
S0/0
S0/1
RD = 6,000,000
RD = 3,000,000
FD = 6,500,000
FD = 3,500,000
Network X
FD = RD + additional Delay of serial link between R1 and neighbor.
(This could also be due the slowest bandwidth.)
Which router isthe successor?
-
8/22/2019 Eigrp Part 1 Sep 2010
28/97
28
Example 1
R1
R2
R3
S0/0
S0/1
RD = 6,000,000
RD = 3,000,000
FD = 6,500,000
FD = 3,500,000
Network X
FD of3,500,000 is the metric for network X in the routing table for
R1.
Successor
Is R2 a feasiblesuccessor?
-
8/22/2019 Eigrp Part 1 Sep 2010
29/97
29
Example 1
R1
R2
R3
S0/0
S0/1
RD = 6,000,000
RD = 3,000,000
FD = 6,500,000
FD = 3,500,000
Network X
RD of R2 is greater than FD through R3.
Does not meet FC.
No FS.
Successor
NOT a Feasible
Successor
-
8/22/2019 Eigrp Part 1 Sep 2010
30/97
30
Example 1
R1
R2
R3
S0/0
S0/1
RD = 6,000,000
RD = 3,000,000
Network X
Maybe R2s path to Network X includes R1 - Loop
Successor
NOT a FeasibleSuccessor
RX
-
8/22/2019 Eigrp Part 1 Sep 2010
31/97
31
Example 1
R1
R2
R3
S0/0
S0/1
RD = 6,000,000
RD = 3,000,000
Network X
Or maybe R2s does have a valid path to Network X.
But R1 cant tell because the distance vector update only gives it
distance and direction.
Successor
NOT a FeasibleSuccessor
RX
-
8/22/2019 Eigrp Part 1 Sep 2010
32/97
32
Example 2: Best Path (Successor)? Feasible Successor?
R1
R2
R3
S0/0
S0/1
RD = 4,000,000
RD = 3,000,000
FD = 5,500,000
FD = 4,500,000
Network X
FD = RD + additional Delay of serial link between R1 and neighbor.
(This could also be due the slowest bandwidth.)
Successor
FeasibleSuccessor?
-
8/22/2019 Eigrp Part 1 Sep 2010
33/97
33
Example 2
R1
R2
R3
S0/0
S0/1
RD = 4,000,000
RD = 3,000,000
FD = 5,500,000
FD = 4,500,000
Network X
RD of R2 is less than (or equal to) the FD through R3.
Meets FC, there is no loop back through R1.
Is a FS.
Successor
FeasibleSuccessor
-
8/22/2019 Eigrp Part 1 Sep 2010
34/97
34
X
Queries
Replies
RtrF
RtrC
RtrE
RtrD
RtrB
RtrA
RtrG
If there are no Feasible Successors, the router must ask neighbors for help in hope offinding a new, loop-free path to the destination.
Neighbor routers are compelled to reply to this query.
If a neighbor has a route, it will reply with information about the successor(s).
If not, the neighbor notifies the sender that it doesnt have a route to the destinationeither.
Looking for new route
Query and Reply Packets
-
8/22/2019 Eigrp Part 1 Sep 2010
35/97
Configuring EIGRP
-
8/22/2019 Eigrp Part 1 Sep 2010
36/97
36
Our Topology
-
8/22/2019 Eigrp Part 1 Sep 2010
37/97
37
Preconfigs
Configured on all routers.
R1(config)# no ip domain lookup
R1(config)# line con 0
R1(config-line)# exec-timeout 0 0
R1(config-line)# logging synchronous
-
8/22/2019 Eigrp Part 1 Sep 2010
38/97
38
R1
Bandwidth of 1,424 Kbps (1,424,000 bps) between R3 and R4 on
bottom link
1544 configured on all serial links just in case.
interface FastEthernet0/0
ip address 192.168.10.1 255.255.255.0
!
interface Serial0/0
bandwidth 1544
ip address 10.0.0.1 255.255.255.252
clock rate 64000
!
interface Serial0/1
bandwidth 1544
ip address 10.0.0.5 255.255.255.252
-
8/22/2019 Eigrp Part 1 Sep 2010
39/97
39
R2
interface FastEthernet0/0
ip address 192.168.20.1 255.255.255.0
!
interface Serial0/0
bandwidth 1544
ip address 10.0.0.2 255.255.255.252
!
interface Serial0/1
bandwidth 1544ip address 10.0.0.9 255.255.255.252
clock rate 64000
-
8/22/2019 Eigrp Part 1 Sep 2010
40/97
40
R3
interface FastEthernet0/0
ip address 192.168.30.1 255.255.255.0
!
interface Serial0/0
bandwidth 1544
ip address 10.0.0.6 255.255.255.252
clockrate 64000
!
interface Serial0/1
bandwidth 1544
ip address 10.0.0.10 255.255.255.252
!
interface Serial0/2
bandwidth 1544ip address 10.0.0.13 255.255.255.252
clockrate 64000
!
interface Serial0/3
bandwidth 1424
ip address 10.0.0.17 255.255.255.252
clockrate 64000
-
8/22/2019 Eigrp Part 1 Sep 2010
41/97
41
R4
interface FastEthernet0/0
ip address 172.16.1.1 255.255.255.0
!
interface Serial0/0
bandwidth 1544
ip address 10.0.0.14 255.255.255.252
!
interface FastEthernet0/1
ip address 172.16.2.1 255.255.255.0!
interface Serial0/1
bandwidth 1424
ip address 10.0.0.18 255.255.255.252
-
8/22/2019 Eigrp Part 1 Sep 2010
42/97
42
Configuring
EIGRP R1
Wildcard masks Specifically tells EIGRP which interfaces to be
enabled on.
If subnet mask is used IOS may convert it for the running-config.
Lets do R2, R3 and R4 serial interfaces with wildcard masks
R1(config)# router eigrp 1
R1(config-router)# network 10.0.0.0 0.0.0.3
R1(config-router)# network 10.0.0.4 0.0.0.3
R1(config-router)# network 192.168.10.0
-
8/22/2019 Eigrp Part 1 Sep 2010
43/97
43
Configuring
EIGRP
R2(config)# router eigrp 1
R2(config-router)# network 10.0.0.0 0.0.0.3
R2(config-router)# network 10.0.0.8 0.0.0.3
R2(config-router)# network 192.168.20.0
R3(config)# router eigrp 1R3(config-router)# network 10.0.0.4 0.0.0.3
R3(config-router)# network 10.0.0.8 0.0.0.3
R3(config-router)# network 10.0.0.12 0.0.0.3
R3(config-router)# network 10.0.0.16 0.0.0.3
R3(config-router)# network 192.168.3.0
R4(config)# router eigrp 1
R4(config-router)# network 10.0.0.12 0.0.0.3
R4(config-router)# network 10.0.0.16 0.0.0.3
R4(config-router)# network 172.16.0.0
-
8/22/2019 Eigrp Part 1 Sep 2010
44/97
44
Outputs
R3# show ip route
C 192.168.30.0/24 is directly connected, FastEthernet0/0
D 192.168.10.0/24 [90/2172416] via 10.0.0.5, 00:02:47, Serial0/0
D 172.16.0.0/16 [90/2172416] via 10.0.0.14, 00:02:39, Serial0/2D 192.168.20.0/24 [90/2172416] via 10.0.0.9, 00:17:22, Serial0/1
10.0.0.0/30 is subnetted, 5 subnets
C 10.0.0.8 is directly connected, Serial0/1
C 10.0.0.12 is directly connected, Serial0/2
D 10.0.0.0 [90/2681856] via 10.0.0.5, 00:02:57, Serial0/0
[90/2681856] via 10.0.0.9, 00:02:57, Serial0/1
C 10.0.0.4 is directly connected, Serial0/0
C 10.0.0.16 is directly connected, Serial0/3
Why does R3 prefer the top link to 172.16.0.0?
It is 1,544 kbps link compared to 1,424 kbps link below
What do you notice aobut the 10.0.0.0 network? How many paths? R3 has equal cost paths to 10.0.0.0/30
-
8/22/2019 Eigrp Part 1 Sep 2010
45/97
45
Outputs
Does R3 see R4 as a neighbor on both links?
Yes
R3# show ip eigrp neighbors
IP-EIGRP neighbors for process 1
H Address Interface Hold Uptime SRTT RTO Q Seq
Type
(sec) (ms) Cnt Num
3 10.0.0.18 Se0/3 13 00:17:37 24 200 0 5
2 10.0.0.14 Se0/2 14 00:17:50 29 200 0 4
1 10.0.0.5 Se0/0 14 00:23:35 607 3642 0 13
0 10.0.0.9 Se0/1 12 00:24:01 60 360 0 21
R3#
-
8/22/2019 Eigrp Part 1 Sep 2010
46/97
46
Outputs
Some other commands
R3# show ip eigrp neighbors detail
IP-EIGRP neighbors for process 1
H Address Interface Hold Uptime SRTT RTO Q Seq Type
(sec) (ms) Cnt Num
3 10.0.0.18 Se0/3 13 01:03:55 24 200 0 5
Version 12.3/1.2, Retrans: 2, Retries: 0
2 10.0.0.14 Se0/2 14 01:04:08 29 200 0 4
Version 12.3/1.2, Retrans: 1, Retries: 0
1 10.0.0.5 Se0/0 13 01:09:52 607 3642 0 13
Version 12.3/1.2, Retrans: 0, Retries: 0
0 10.0.0.9 Se0/1 12 01:10:19 60 360 0 21
Version 12.3/1.2, Retrans: 0, Retries: 0
R3#
-
8/22/2019 Eigrp Part 1 Sep 2010
47/97
47
Outputs
R3# show ip eigrp interfaces
IP-EIGRP interfaces for process 1
Xmit Queue Mean Pacing Time Multicast Pending
Interface Peers Un/Reliable SRTT Un/Reliable Flow Timer Routes
Se0/1 1 0/0 60 0/15 299 0
Se0/0 1 0/0 607 0/15 3031 0
Se0/2 1 0/0 29 0/15 143 0
Se0/3 1 0/0 24 0/17 50 0
R3#
-
8/22/2019 Eigrp Part 1 Sep 2010
48/97
48
R3# show ip protocols
Routing Protocol is "eigrp 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updatesDefault networks accepted from incoming updates
EIGRP metric weight K1=1, K2=0, K3=1, K4=0, K5=0
EIGRP maximum hopcount 100
EIGRP maximum metric variance 1
Redistributing: eigrp 1
Automatic network summarization is in effect
Maximum path: 4
Routing for Networks:
10.0.0.4/30
10.0.0.8/30
10.0.0.12/30
10.0.0.16/30
192.168.3.0
Routing Information Sources:
Gateway Distance Last Update
10.0.0.9 90 00:03:03
10.0.0.14 90 00:03:03
10.0.0.5 90 00:03:11
10.0.0.18 90 00:03:03Distance: internal 90 external 170
What are these telling us?
K values
Variance, later
Directly connected networks
Neighbors
-
8/22/2019 Eigrp Part 1 Sep 2010
49/97
49
Outputs
R3# show ip eigrp topology
P 10.0.0.0/30, 2 successors, FD is 2681856via 10.0.0.9 (2681856/2169856), Serial0/1
via 10.0.0.5 (2681856/2169856), Serial0/0
P 172.16.0.0/16, 1 successors, FD is 2172416
via 10.0.0.14 (2172416/28160), Serial0/2
via 10.0.0.18 (2312192/28160), Serial0/3successor
feasible successor
Feasible distance
Feasible distance: if this router was the successor.
Reported Distance
is less than
Feasible distance
-
8/22/2019 Eigrp Part 1 Sep 2010
50/97
50
Outputs
Why does R3 show a third entry for 10.0.0.0/30? Why is R4 a non-feasible successor?
Reported distance > Feasible distance
There is a loop!!!
R3# show ip eigrp topology all-links
P 10.0.0.0/30, 2 successors, FD is 2681856, serno 13
via 10.0.0.9 (2681856/2169856), Serial0/1
via 10.0.0.5 (2681856/2169856), Serial0/0
via 10.0.0.18 (3845632/3193856), Serial0/3
successorsuccessor
non-feasible
successor
-
8/22/2019 Eigrp Part 1 Sep 2010
51/97
Authentication
-
8/22/2019 Eigrp Part 1 Sep 2010
52/97
52
Authentication
EIGRP authentication helps prevent Denial of Service (DoS) attacks.
Prevents attackers from forming neighbor relationships withlegitimate routers, preventing the advertisement of incorrect
routing information.
Does not provide any privacy.
No encryption.
EIGRP uses generic router key chains as storage locations for keys.
These classify keys into groups and enable keys.
Use the key chain name command in global configuration mode to
create a chain of keys with the label EIGRP-KEYS.
-
8/22/2019 Eigrp Part 1 Sep 2010
53/97
53
R1(config)# key chain carkeys
R1(config-keychain)# key 1
R1(config-keychain-key)# key-string ford
R1(config)# interface Serial0/0
R1(config-if)# ip authentication mode eigrp 1 md5
R1(config-if)# ip authentication key-chain eigrp 1 carkeys
R1(config)# interface Serial0/1
R1(config-if)# ip authentication mode eigrp 1 md5
R1(config-if)# ip authentication key-chain eigrp 1 carkeys
-
8/22/2019 Eigrp Part 1 Sep 2010
54/97
54
Authentication
R1# show key chain
Key-chain carkeys:
key 1 -- text "ford"
accept lifetime (always valid) - (always valid) [valid now]
send lifetime (always valid) - (always valid) [valid now]
-
8/22/2019 Eigrp Part 1 Sep 2010
55/97
55
R2(config)# key chainmykeys
R2(config-keychain)# key 1
R2(config-keychain-key)# key-string ford
R2(config)# interface Serial0/0
R2(config-if)# ip authentication mode eigrp 1 md5
R2(config-if)# ip authentication key-chain eigrp 1mykeys
-
8/22/2019 Eigrp Part 1 Sep 2010
56/97
56
R3(config)# key chain thekeys
R3(config-keychain)# key 1
R3(config-keychain-key)# key-string toyota
R3(config)# interface Serial0/0
R3(config-if)# ip authentication mode eigrp 1 md5
R3(config-if)# ip authentication key-chain eigrp 1 thekeys
-
8/22/2019 Eigrp Part 1 Sep 2010
57/97
57
Authentication
Whats the problem?
R1# show ip eigrp nei
IP-EIGRP neighbors for process 1
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
0 10.0.0.2 Se0/0 13 00:18:12 40 240 0 49
R1#
-
8/22/2019 Eigrp Part 1 Sep 2010
58/97
58
Authentication
invalid authentication = mismatch
missing authentication = message did not include an md5 digest
R1# debug eigrp packet
EIGRP Packets debugging is on
(UPDATE, REQUEST, QUERY, REPLY, HELLO, IPXSAP, PROBE, ACK, STUB,
SIAQUERY, SIAREPLY)R1#
*Mar 1 02:37:25.651: EIGRP: pkt key id = 1, authentication mismatch
*Mar 1 02:37:25.651: EIGRP: Serial0/1: ignored packet from 10.0.0.6,
opcode = 5 (invalid authentication)
-
8/22/2019 Eigrp Part 1 Sep 2010
59/97
59
R3(config)# key chain thekeys
R3(config-keychain)# key 1
R3(config-keychain-key)# key-string ford
R3(config)# interface Serial0/0
R3(config-if)# ip authentication mode eigrp 1 md5
R3(config-if)# ip authentication key-chain eigrp 1 thekeys
-
8/22/2019 Eigrp Part 1 Sep 2010
60/97
60
Authentication
Did we fix it?
R1# show ip eigrp nei
IP-EIGRP neighbors for process 1
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
1 10.0.0.6 Se0/1 13 00:04:11 36 216 0 79
0 10.0.0.2 Se0/0 13 00:18:12 40 240 0 49
R1#
-
8/22/2019 Eigrp Part 1 Sep 2010
61/97
61
Multiple Keys
Multiple keys in a key chain, and the existence of valid lifetimes for
each key, can cause some confusion in regards to when the key are
used. The rules can be summarized as follows:
Sending EIGRP messages: Use the lowest key numberamong
all currently-valid keys
Receiving EIGRP message: Check the MD5 digest usingALL
currently-valid keys
key chain trees
key 1
key-string chestnut
accept-lifetime 13:30:00 Sep 25 2009 14:30:00 Oct 25 2009
send-lifetime 13:30:00 Sep 25 2009 14:30:00 Oct 25 2009
key 2
key-string birch
accept-lifetime 14:30:00 Oct 25 2009 infinite
send-lifetime 14:30:00 Oct 25 2009 infinite
-
8/22/2019 Eigrp Part 1 Sep 2010
62/97
62
The key chain name and key numberused on the two routers do
not have to match.
The key string on each of the two potential neighbors must match
Check which keys are currently valid using the show key chain
command.
Both must be configured: ip authentication mode eigrp asn md5
ip authentication key-chain eigrp asn name-of-chain
Multiple Keys: Examine the configuration and the current time
(show clock) on both routers.
-
8/22/2019 Eigrp Part 1 Sep 2010
63/97
Passive Interfaces
-
8/22/2019 Eigrp Part 1 Sep 2010
64/97
64
Passive Interfaces
Two ways to prevent EIGRP from speaking sending EIGRP
messages on an interface.
1. Enable EIGRP on the interface using the EIGRP network command
Do NOT send any EIGRP messages on the interface by using
the passive-interface command. No Hellos, thus no neighbor adjacency
Prefix (interface subnet) is still advertised on other interfaces
2. Do NOT enable EIGRP on the interface,
Advertise about the connected route using route redistribution
using the redistribute connected configuration command.
More complicated
Less popular
Passive
-
8/22/2019 Eigrp Part 1 Sep 2010
65/97
65
Passive
Interfaces
R1# show ip eigrp inter
IP-EIGRP interfaces for process 1
Xmit Queue Mean Pacing Time Multicast Pending
Interface Peers Un/Reliable SRTT Un/Reliable Flow Timer Routes
Se0/0 1 0/0 34 0/15 163 0
Se0/1 1 0/0 31 0/15 147 0
Fa0/0 0 0/0 0 0/10 0 0
The show ip eigrp interfaces command displays working interfaces
on which EIGRP has been enabled, but omits passive interfaces.
A failure of the interface, or making the interface passive, would omit
the interface from the output of this command.
-
8/22/2019 Eigrp Part 1 Sep 2010
66/97
66
No longer a neighbor.
Must include network command.
R1(config)# router eigrp 1
R1(config-router)#passive-interface fa 0/0
R1# show ip eigrp inter
IP-EIGRP interfaces for process 1
Xmit Queue Mean Pacing Time Multicast Pending
Interface Peers Un/Reliable SRTT Un/Reliable Flow Timer Routes
Se0/0 1 0/0 32 0/15 151 0
Se0/1 1 0/0 28 0/15 139 0
R1#
R1(config)# router eigrp 1
R1(config-router)# network 192.168.10.0
-
8/22/2019 Eigrp Part 1 Sep 2010
67/97
67
Verifying
R1# show ip protocols
Routing for Networks:
10.0.0.0/3010.0.0.4/30
192.168.10.0
Passive Interface(s):
FastEthernet0/0
-
8/22/2019 Eigrp Part 1 Sep 2010
68/97
68
R4(config)# router eigrp 1
R4(config-router)#passive-interface default
R4(config-router)# no passive-interface ser 0/0
R4(config-router)# no passive-interface ser 0/1
R4# show ip protocols
Routing for Networks:
10.0.0.12/3010.0.0.16/30
172.16.0.0
Passive Interface(s):
FastEthernet0/0
FastEthernet0/1
-
8/22/2019 Eigrp Part 1 Sep 2010
69/97
Stuck-In-Active
Router
C R D
St k i A ti (SIA)
-
8/22/2019 Eigrp Part 1 Sep 2010
70/97
70
X
Replies
Router
A
Router
B
C Router D
Queries
X
X
When EIGRP returns a stuck in active (SIA) message, it means that it has
not received a reply to a query.
Summarization can help prevent SIA.
Stuck in Active (SIA)
SIA
St k i A ti (SIA)
-
8/22/2019 Eigrp Part 1 Sep 2010
71/97
71
Typically, SIAs results when a router cannot answer a query
because:
The router is too busy to answer the query
High CPU utilization
The router cannot allocate the memory to process the query Bad circuit between the routers (packet loss)
Unidirectional links
A link on which traffic can only flow in one direction due to a
failure
Solutions:
Stub Routers
Summarization
Stuck in Active (SIA)
T bl h ti (SIA) FYI
-
8/22/2019 Eigrp Part 1 Sep 2010
72/97
72
Troubleshooting Steps:
Step 1: find the routes which are consistently being reported as stuck in active. If you are logging console messages, a quick perusal of the log will indicate
which routes are being marked as stuck in active most often.
Step 2: find out which routers are consistently failing to answer queries (not alwayseasy).
Use the show ip eigrp topologyactive command.
Any neighbors which have the rbeside them are neighbors that the
router is waiting on replies from the active timer is how long the route has been active.
pay particular attention to routes that have replies outstanding and havebeen active for 2 to 3 minute
Step 3: find the reason why that router is not receiving or answering queries
One you have found the router that is consistently not answering queries,
look for problems on the link to this neighbor, memory or CPU utilizationproblems with this neighbor, etc.
Troubleshooting (SIA) - FYI
T bl h ti (SIA) FYI
-
8/22/2019 Eigrp Part 1 Sep 2010
73/97
73
SanJose2#show ip eigrp top all-linksCodes: P - Passive, A - Active, U - Update, Q - Query, R -
Reply, r - Reply status
A 10.2.4.0/24, 0 successors, FD is 512640000, Q1 replies, active 00:00:01, query-origin: Local origin
via 10.1.2.2 (Infinity/Infinity), Serial11 replies, active 00:00:01, query-origin: Local origin
via 10.1.3.2 (Infinity/Infinity), r, Serial3
Remaining replies:via 10.1.1.2, r, Serial0
Any neighbors that show an R have yet to reply (the active timer shows how long theroute has been active).
Pay particular attention to routes that have outstanding replies and have been active for
some time, generally two to three minutes.
Troubleshooting (SIA) - FYI
-
8/22/2019 Eigrp Part 1 Sep 2010
74/97
Stub Routers
St b R t
-
8/22/2019 Eigrp Part 1 Sep 2010
75/97
75
Stub Routers
Introduced with IOS 12.0
Stub router
Only has one neighbor
Only needs a default route
Commonly used in a hub and spoke network topology.
Helps with convergence Helps prevent SIA
Only the remote router is configured as a stub.
Only specified routes are propagated from the remote (stub) router.
Any neighbor will not query the stub router for any routes.
Stub router will send a special peer information packet to all neighboring routers toreport its status as a stub router.
X
Queries
Im a Stub
St b R t
-
8/22/2019 Eigrp Part 1 Sep 2010
76/97
76
Stub Routers
This router is allowed to
Connected -Advertise connected routes, but only for interfaces
matched with a network command
Summary -Advertise auto-summarized or statically configured
summary routes
Static -Advertises static routes, assuming the redistribute
static command is configured
Redistr ibuted -Advertises redistributed routes, assuming
redistribution is configured
Receive-only - Does not advertise any routes. This option
cannot be used with any other option..
R3(config)# router eigrp 1
R3(config-router)# eigrp stuboption
St b R t
-
8/22/2019 Eigrp Part 1 Sep 2010
77/97
77
Stub Routers
This is not the ideal place, but we will configure the stub network
here just to show the results.
R3(config)# router eigrp 1
R3(config-router)# eigrp stub connected
St b R t
-
8/22/2019 Eigrp Part 1 Sep 2010
78/97
78
Stub Routers
R1# show ip route
C 192.168.10.0/24 is directly connected, FastEthernet0/0
D 192.168.20.0/24 [90/2172416] via 10.0.0.2, 00:44:53, Serial0/0
10.0.0.0/30 is subnetted, 5 subnets
D 10.0.0.8 [90/2681856] via 10.0.0.2, 00:00:50, Serial0/0
[90/2681856] via 10.0.0.6, 00:00:50, Serial0/1
D 10.0.0.12 [90/2681856] via 10.0.0.6, 00:00:50, Serial0/1
C 10.0.0.0 is directly connected, Serial0/0
C 10.0.0.4 is directly connected, Serial0/1
D 10.0.0.16 [90/2821632] via 10.0.0.6, 00:00:51, Serial0/1
R4# show ip route
172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks
D 172.16.0.0/16 is a summary, 00:22:16, Null0
C 172.16.1.0/24 is directly connected, FastEthernet0/0C 172.16.2.0/24 is directly connected, FastEthernet0/1
10.0.0.0/30 is subnetted, 4 subnets
D 10.0.0.8 [90/2681856] via 10.0.0.13, 00:01:52, Serial0/0
C 10.0.0.12 is directly connected, Serial0/0
D 10.0.0.4 [90/2681856] via 10.0.0.13, 00:01:52, Serial0/0
C 10.0.0.16 is directly connected, Serial0/1
No 172.16.0.0 networks
Only connected networks
St b R t
-
8/22/2019 Eigrp Part 1 Sep 2010
79/97
79
Stub Routers
R4 has a complete routingtable.
R3(config)# router eigrp 1
R3(config-router)# no eigrp stub connected
R4(config)# router eigrp 1
R4(config-router)# eigrp stub receive-only
R4# show ip route
D 192.168.10.0/24 [90/2684416] via 10.0.0.13, 00:01:19, Serial0/0
172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks
D 172.16.0.0/16 is a summary, 00:03:36, Null0
C 172.16.1.0/24 is directly connected, FastEthernet0/0
C 172.16.2.0/24 is directly connected, FastEthernet0/1D 192.168.20.0/24 [90/2684416] via 10.0.0.13, 00:01:19, Serial0/0
10.0.0.0/30 is subnetted, 5 subnets
D 10.0.0.8 [90/2681856] via 10.0.0.13, 00:01:19, Serial0/0
C 10.0.0.12 is directly connected, Serial0/0
D 10.0.0.0 [90/3193856] via 10.0.0.13, 00:01:20, Serial0/0
D 10.0.0.4 [90/2681856] via 10.0.0.13, 00:01:20, Serial0/0
C 10.0.0.16 is directly connected, Serial0/1
St b Ro ters
-
8/22/2019 Eigrp Part 1 Sep 2010
80/97
80
Stub Routers
What will R1, R2, and R3 no longer see?
R1, R2, and R3 do not have R4 LANs.
R1# show ip route
C 192.168.10.0/24 is directly connected, FastEthernet0/0
D 192.168.20.0/24 [90/2172416] via 10.0.0.2, 04:59:55, Serial0/0
10.0.0.0/30 is subnetted, 5 subnets
D 10.0.0.8 [90/2681856] via 10.0.0.2, 04:59:55, Serial0/0
[90/2681856] via 10.0.0.6, 04:59:55, Serial0/1
D 10.0.0.12 [90/2681856] via 10.0.0.6, 04:59:55, Serial0/1
C 10.0.0.0 is directly connected, Serial0/0
C 10.0.0.4 is directly connected, Serial0/1
D 10.0.0.16 [90/2821632] via 10.0.0.6, 04:59:56, Serial0/1
R1#
Stub Routers
-
8/22/2019 Eigrp Part 1 Sep 2010
81/97
81
Stub Routers
R4(config)# router eigrp 1
R4(config-router)# eigrp stub connected
R3# show ip route
C 192.168.30.0/24 is directly connected, FastEthernet0/0D 192.168.10.0/24 [90/2172416] via 10.0.0.5, 00:05:50, Serial0/0
172.16.0.0/24 is subnetted, 2 subnets
D 172.16.1.0 [90/2172416] via 10.0.0.14, 00:00:52, Serial0/2
D 172.16.2.0 [90/2172416] via 10.0.0.14, 00:00:52, Serial0/2
D 192.168.20.0/24 [90/2172416] via 10.0.0.9, 00:05:50, Serial0/1
10.0.0.0/30 is subnetted, 5 subnets
C 10.0.0.8 is directly connected, Serial0/1
C 10.0.0.12 is directly connected, Serial0/2
D 10.0.0.0 [90/2681856] via 10.0.0.9, 00:05:51, Serial0/1
[90/2681856] via 10.0.0.5, 00:05:51, Serial0/0
C 10.0.0.4 is directly connected, Serial0/0
C 10.0.0.16 is directly connected, Serial0/3
What do you expect R3 to see now?
Stub Routers X
-
8/22/2019 Eigrp Part 1 Sep 2010
82/97
82
Stub Routers
EIGRP defines stub routers as a router which should not forward
traffic between two remote EIGRP-learned subnets.
If WAN2's LAN interface failed, and WAN1's PVC to B1 failed,
then
These conditions may well be worse than just not using this longroute.
X
-
8/22/2019 Eigrp Part 1 Sep 2010
83/97
Unequal Cost Load Balancing
Variance command
Variance command
-
8/22/2019 Eigrp Part 1 Sep 2010
84/97
84
Variance command
EIGRP does unequal cost load balancing, forwarding packets relative to the
metric. The variance command instructs the router to include routes with a metric
less than or equal to n times the minimum metric route for that destination,
where n is the number specified by the variance command.
Note: If a path isn't a feasible successor, then it isn't used in load balancing.
The maximum-pathsnumberEIGRP is used to sent the number of load-
balancing paths.
Maximum number of paths varies based on IOS version and router platform.
Was 6 routes,
Later versions supporting 16 or more.
Router(config)# router eigrp 1Router(config-router)# variance number
Variance
-
8/22/2019 Eigrp Part 1 Sep 2010
85/97
85
command
R4#show ip route
D 192.168.10.0/24 [90/3196416] via 10.0.0.13, 00:17:10, Serial0/0
172.16.0.0/16 is variably subnetted, 3 subnets, 2 masksD 172.16.0.0/16 is a summary, 00:56:15, Null0
C 172.16.1.0/24 is directly connected, FastEthernet0/0
C 172.16.2.0/24 is directly connected, FastEthernet0/1
D 192.168.20.0/24 [90/2684416] via 10.0.0.13, 00:51:17, Serial0/0
10.0.0.0/30 is subnetted, 5 subnets
D 10.0.0.8 [90/2681856] via 10.0.0.13, 00:51:17, Serial0/0
C 10.0.0.12 is directly connected, Serial0/0
D 10.0.0.0 [90/3193856] via 10.0.0.13, 00:51:18, Serial0/0
D 10.0.0.4 [90/2681856] via 10.0.0.13, 00:51:18, Serial0/0
C 10.0.0.16 is directly connected, Serial0/1
Serial0/0 is the preferred route with
a bandwidth of 1544kbps
Variance
-
8/22/2019 Eigrp Part 1 Sep 2010
86/97
86
command
R3 via Serial 0/1 is a Feasible Successorfor all remote routes.
R4# show ip eigrp topology
P 10.0.0.8/30, 1 successors, FD is 2681856
via 10.0.0.13 (2681856/2169856), Serial0/0via 10.0.0.17 (2821632/2169856), Serial0/1
P 192.168.10.0/24, 1 successors, FD is 2694416
via 10.0.0.13 (3196416/2684416), Serial0/0
via 10.0.0.17 (3336192/2684416), Serial0/1
Variance
-
8/22/2019 Eigrp Part 1 Sep 2010
87/97
87
command
Remember, R3 is a neighbor on both links.
R4# show ip eigrp neighbors
IP-EIGRP neighbors for process 1
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
1 10.0.0.13 Se0/0 14 00:51:47 29 200 0 158
0 10.0.0.17 Se0/1 10 00:51:48 24 200 0 159
R4#
Variance
-
8/22/2019 Eigrp Part 1 Sep 2010
88/97
88
command
Include routes with a metric less than or equal to 2 times the
minimum metric route for that destination.
R4(config)# router eigrp 1
R4(config-router)# variance 2
Variance
-
8/22/2019 Eigrp Part 1 Sep 2010
89/97
89
command
Include routes with a metric less than or equal to 2 times the
minimum metric route for that destination.
FD = 3196416
Include any metric less than or equal to: 2 * 3196416 or 6392832
R4# show ip route
D 192.168.10.0/24 [90/3196416] via 10.0.0.13, 00:17:10, Serial0/0
R4# show ip route
D 192.168.10.0/24 [90/3196416] via 10.0.0.13, 00:00:37, Serial0/0[90/3336192] via 10.0.0.17, 00:00:37, Serial0/1
Before
After
Variance
-
8/22/2019 Eigrp Part 1 Sep 2010
90/97
90
command
Via 10.0.0.17 is a Feasible Successor so it is eligible for unequal
cost load balancing.
R4# show ip eigrp topology
P 192.168.10.0/24, 1 successors, FD is 2694416
via 10.0.0.13 (3196416/2684416), Serial0/0via 10.0.0.17 (3336192/2684416), Serial0/1
R4# show ip route
D 192.168.10.0/24 [90/3196416] via 10.0.0.13, 00:00:37, Serial0/0
[90/3336192] via 10.0.0.17, 00:00:37, Serial0/1
Feasible distance ifthis becomes a route
in the routing table
-
8/22/2019 Eigrp Part 1 Sep 2010
91/97
Bandwidth allocation for EIGRP
messages
The bandwidth-percent command
-
8/22/2019 Eigrp Part 1 Sep 2010
92/97
92
The bandwidth-percent command
Thebandwidth-percent command configures the percentage ofbandwidth that may be used by EIGRP on an interface.
By default, EIGRP is set to use only up to 50% of the bandwidth ofan interface to exchange routing information.
In order to calculate its percentage, thebandwidth-percent
command relies on the value set by thebandwidth command.
Allows EIGRP to use up to 75 percent (42 kbps) of a 56-kbps seriallink in autonomous system 209.
ip bandwidth-percent eigrp as-number percent
interface serial 0
bandwidth 56
ip bandwidth-percent eigrp 209 75
Summarizing EIGRP Routes:no auto-summary
-
8/22/2019 Eigrp Part 1 Sep 2010
93/97
93
no auto summary
EIGRP automatically summarizes routes at the classful boundary, the
boundary where the network address ends as defined by class-based
addressing.
Summarizing EIGRP Routes:
-
8/22/2019 Eigrp Part 1 Sep 2010
94/97
94
no auto-summary
In the presence of discontiguous subnetworks, automaticsummarization must be disabled for routing to work properly.
To turn off auto-summarization, use the following command:
Router(config-router)#no auto-summary
Summarizing EIGRP Routes: Interface
-
8/22/2019 Eigrp Part 1 Sep 2010
95/97
95
Summarization
Router(config-if)#ip summary-address eigrpautonomous-system-numberip-address mask administrative-distance
RTC(config)#router eigrp 2446
RTC(config-router)#no auto-summary
RTC(config-router)#exit
RTC(config)#interface serial0/0
RTC(config-if)#ip summary-address eigrp 2446 2.1.0.0 255.255.0.0
Summarizing EIGRP Routes: Interface
-
8/22/2019 Eigrp Part 1 Sep 2010
96/97
96
Summarization
RTC(config)#interface serial0/0RTC(config-if)#ip summary-address eigrp 2446 2.1.0.0 255.255.0.0
RTCs Routing Table:
D 2.1.0.0/16 is a summary, 00:00:22, Null0
Notice that the summary route is sourced from Null0, and not an actual interface. That is because this route is used for advertisement purposes and does not represent a
path that RTC can take to reach that network.
On RTC, this route has an administrative distance of 5.
RTD is oblivious to the summarization but accepts the route. It assigns the route the
administrative distance of a "normal" EIGRP route, which is 90, by default
-
8/22/2019 Eigrp Part 1 Sep 2010
97/97
BAI 511
Advanced Routing Protocols
EIGRP Part 1